cmp-sp.handelsblatt.com

Issued by R3

About this certificate

This digital certificate with serial number 03:94:c6:18:21:06:dc:ea:e2:a6:11:b0:1b:d7:aa:96:16:31 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp-sp.handelsblatt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:94:c6:18:21:06:dc:ea:e2:a6:11:b0:1b:d7:aa:96:16:31
Serial Number (int): 311961960527732907267860633885597224015409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:a4:58:12:58:38:20:e2:2a:e2:09:f8:9d:f5:75:cb:6e:48:f6:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:91:50:8b:cb:4f:4d:ec:38:a5:0a:62:d7:b4:aa:d1:dc:7a:cb:8d
Fingerprint (sha256): c9:5e:56:83:c8:92:6e:d9:f0:d7:c0:00:3e:a0:14:14:34:9b:22:b6:ac:2b:b7:3f:f0:c9:a2:42:27:b4:9d:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp-sp.handelsblatt.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp-sp.handelsblatt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp-sp.handelsblatt.com
cmp-sp.pnn.de
cmp-sp.tagesspiegel.de
cmp-sp.wiwo.de
cmp.berufstest.zeit.de
cmp.cicero.de
cmp.monopol-magazin.de
cmp2.prod.academics.at
cmp2.prod.academics.ch
cmp2.prod.academics.com
cmp2.prod.academics.de
cmp2.prod.jobs.zeit.de
consent-cdn.zeit.de
consent.btc-echo.de

Other certificates including the domain name handelsblatt.com

(limited to 100 certificates)
financetoday.handelsblatt.com
handelsblatt.com
image.e.grandamerica.com
innovationen.handelsblatt.com
playground.handelsblatt.com
wiwo.jobturbo.de
click.email.handelsblatt.com
kurspiloten.handelsblatt.com
handelsblatt.com
image.e.grandamerica.com
chinacircle.handelsblatt.com
br.bikeradar.com
kreditkartenvergleich.handelsblatt.com
abo.handelsblatt.com
ssl963081.cloudflaressl.com
san-4-s7.tlsprovisioning.exacttarget.com
karriere.handelsblatt.com
akademie.handelsblatt.com
kreditkartenvergleich.handelsblatt.com
wiwo.jobturbo.de
www.stepstone.de
morningbriefing-global.handelsblatt.com
unternehmen.handelsblatt.com
auswahl.handelsblatt.com
tls.automattic.com
*.handelsblatt.com
ssl963081.cloudflaressl.com
chronoto.de
image.e.grandamerica.com
tagesgeld.rechner.app.handelsblatt.com
wiwo.jobturbo.de
image.e.grandamerica.com
image.e.grandamerica.com
*.redaktion.handelsblatt.com
tls.automattic.com
tls.automattic.com
cmk.handelsblatt.com
vhb-umfragen.de
akamai-san27.exacttarget.com
tls.automattic.com
www.stepstone.de
akademie.handelsblatt.com
br.bikeradar.com
*.edison.handelsblatt.com
cmk.handelsblatt.com
chinacircle.handelsblatt.com
wiwo.jobturbo.de
seniorenratgeber.handelsblatt.com
image.e.grandamerica.com
www.handelsblattglobal.shop
image.e.grandamerica.com
services.global-showroom.handelsblatt.com
tls.automattic.com
wiwo.jobturbo.de
image.e.grandamerica.com
chinacircle.handelsblatt.com
handelsblatt.com
playground.handelsblatt.com
info-angebot.handelsblatt.com
cmk.handelsblatt.com
jobs.handelsblatt.com
karriere.handelsblatt.com
br.bikeradar.com

tls.automattic.com
wikifolio.handelsblatt.com
br.bikeradar.com
tls.automattic.com
akamai-san27.exacttarget.com
wiwo.jobturbo.de
abo.handelsblatt.com
chinacircle.handelsblatt.com
norkon.handelsblatt.com
chinacircle.handelsblatt.com
image.e.grandamerica.com
data-08d52e2a42.handelsblatt.com
br.bikeradar.com
tls.automattic.com
tls.automattic.com
handelsblattmediagroup.de
*.cmk.iqdigital.de
tls.automattic.com
handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
*.edison.handelsblatt.com
*.redaktion.handelsblatt.com
wiwo.jobturbo.de
services.global-showroom.handelsblatt.com
services.global-showroom.handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
hbgateway-prod.vhbdns.de
karriere.handelsblatt.com
morningbriefingmail.handelsblatt.com
tls.automattic.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for cmp-sp.handelsblatt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwGF5H2mXaG3cC7R4ACq
SvHPQ8Fz1cUPjjNiXQVLxZ7Opd3C+Z8la8gK4fDmvxV1D6/ayFwQWqiSyiTov1p9
IK7R6d7+tLggzX3xDqmXDo0n0SbRSja05/TsqzpOYg25XemOWDw0j+tOT1rZRgww
TcOEsSuCqMOfSVHzLhNVCvSULepEcThD/LFlEs9EK68xvruAXb2XS3mIiPVP8maU
EP/bMfY91vYsiD4S1X7JSjQ+A+Q6Ppfp3efsp7SPnJOlqAQ6ge8ziJq9O1IwLCgR
KADOiyjgVrxIv6KCLi7sdrPX+vpVx/wqfWZE8AtCzzulX/g0aCGwyuL2iX5VAr7A
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311961960527732907267860633885597224015409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 12:24:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 12:24:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp-sp.handelsblatt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21082547957372171026159259915525209983710730403186451626565232872342213571977583150891402935559489788988402266366256451746804757202893557914420463922928424675276446001942806690916708127151343696384177912165416502850546552230980191773956840635099693959078603554829523570389205764616936761460349695756781341964727807094131979533627185673789024947387239126125510323312147459590484468241529535764368806585604777476604791883974083098803891917253897926214098677651295102915874320064199975376414341944254040395896925095525178641846321441553183330302086679359699313227567263297190854956311938703023953799518566759553040302217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73a45812583820e22ae209f89df575cb6e48f608
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.handelsblatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.pnn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.tagesspiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.wiwo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.berufstest.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cicero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.monopol-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-cdn.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.btc-echo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e612f11010000040300473045022007f4c4c1e63a1cd5d0dbb2db0878588edbe4185efda2aadf3230c793d86b7e18022100b961c69586bc17c958cb7282057a3fe74dd6e9b8fea8982c13ca0dd7ae4b850d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e612f1109000004030047304502205c221005c51ac5f33ec5ca1d4d7aa5eb38c5d86f1eda527a6b0c6420a1c18efb022100843e9afe92c4297e5d3fd3ddd3d4028a91bb87b5c52629fe8633bcabf8d734bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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